TI-2016-04197 CVE-2016-4854 · GHSA-g8vq-x5xw-vgcmCross-site request forgery in NTT DOCOMO, INC. L-04DPriority MEDIUM 40Cross-site request forgery (CSRF) vulnerability in L-04D firmware version V10a and V10b allows remote attackers to hijack the authentication of administrators to perform arbitrary operations via unspecified vectors.CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00977 · Published 2017-05-22 · No fix listed CWE-352